The first question is inspired by the CrowdStrike incident f…

Questions

The first questiоn is inspired by the CrоwdStrike incident frоm 2024  but you do not need to know the detаils of whаt exаctly happened. You will be provided with the information necessary to answer this question, and its goal is to test your knowledge of a trusted computing base (TCB).The CrowdStrike incident was caused by an update that resulted in the introduction of a bug in code that, when executed, crashed millions of Windows machines, leading to worldwide disruption of information technology services in many sectors.  First, list and describe the requirements that should be met by a trusted computing base (TCB). (2+2+2 pts.) If the CrowdStrike security agent ran outside of the TCB as an unprivileged user process, could a bug in the agent crash the entire system as it actually did? Explain your answer by discussing a TCB requirement that supports it. (1+2 pts.) An analysis of the CrowdStrike bug showed that the cause of the crash was an error where the required number of arguments were not passed to a call. As a result, a pointer dereference led to illegal memory access, causing the system to crash. If code with such a bug was part of the TCB, which of the TCB requirements would be violated? For full credit, discuss each TCB requirement and whether it was violated. (2+2+2 pts.)